CVE-2018-19286

Name of the Vulnerable Software and Affected Versions mubu note version 2018-11-11

Description The issue allows for XSS by configuring an account with a crafted name value, along with an arbitrary username value, and then creating and sharing a note.

Recommendations For mubu note version 2018-11-11, as a temporary workaround, consider restricting the ability to create and share notes until a patch is available. Avoid using crafted name values in account configurations to minimize the risk of exploitation.